[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","uttiyam","name","IDfy_Prop","path","MSME-lending-MY/Old_MSME/MSME-Run_v2.ts","project",{"_22":49,"_11":12,"_35":50,"_51":-5,"_52":44,"_53":54,"_55":54,"_56":57,"_58":-5,"_59":60,"_61":62,"_63":34,"_64":-5,"_65":-5,"_66":67,"_68":69,"_70":-5,"_71":-5,"_72":-5,"_73":-5,"_74":75,"_76":75,"_77":78,"_79":78,"_80":78,"_81":75,"_82":75,"_83":84,"_85":86,"_87":88,"_89":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/uttiyam/IDfy_Prop/code/MSME-lending-MY/Old_MSME/MSME-Run_v2.ts","extension","id","0c5ac7ca-7a8c-4115-9c43-4caa57b13735","MSME-Run_v2.ts","fileId","b77c0b12-ac5f-11f1-a7b3-1607ee4eb77e","parentId","acf1932e-ac5f-11f1-8459-1607ee4eb77e","branchId","df48c4e7-05fa-432b-a459-74b0de46b89d","branchVersion",27,"latest",true,"createdAt",["D",1788966330578],"version",4,"fileType","http","content","/**\n * IDfy ProfileIQ — MY (Malaysia MSME lending demo).\n *\n * The app HTML lives in Val Town blob storage rather than as a string\n * in this source, so the val doesn't match Val Town's abuse-scanner\n * pattern for obfuscated payloads.\n *\n * First-time setup:\n * 1. Set the env var ADMIN_TOKEN to something private.\n * 2. Open the val's URL — you'll see the setup page.\n * 3. Pick IDfy_ProfileIQ_MY.html, enter your ADMIN_TOKEN, upload.\n * 4. Reload — the app is live.\n *\n * To ship an updated HTML: repeat the same upload. The blob is replaced\n * atomically and the next request serves the new version.\n */\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst IDFY_EVE = \"https://eve.idfy.com\";\nconst IDFY_API = \"https://api.idfy.com\"; // AML POST only; polling stays on eve\n\nconst APP_KEY = \"profileiq_my_app_html_v1\"; // blob key for the app HTML\nconst UPLOAD_TTL_MS = 6 * 60 * 60 * 1000; // merchant uploads expire in 6h\n\nconst DEFAULTS: Record = {\n IDFY_ACCOUNT_ID: \"1da425c08af2/fa11f9c1-22d0-4532-8f67-80cd5428b025\",\n IDFY_API_KEY: \"a7e0c4ab-4fd8-4532-9518-a48d4ce221ed\",\n MINERU_API_TOKEN: \"sk-KCbarPqKWeLK1k7okL7yJ249duQsDO9efLMhtBf8GWTW6C2h\",\n XAI_API_KEY: \"xai-auUqTx7uYlWYJFd5k5WTF6M1I9tTaDmGjWdHsWgHb4SwiGJlT3Guo6PszhfWp1Cjmck2FyIOg8BnjNyK\",\n ADMIN_TOKEN: \"\", // no default — must be set\n};\nconst conf = (k: string) => Deno.env.get(k) || DEFAULTS[k] || \"\";\n\n/* -------- app HTML from blob -------- */\nasync function getAppHTML(): Promise {\n try {\n const r = await blob.get(APP_KEY);\n if (!r) return null;\n return await new Response(r.body).text();\n } catch {\n return null;\n }\n}\n\nfunction setupPage(): string {\n return `\nProfileIQ MY — setup\n\n\n

ProfileIQ MY — not yet initialized

Upload the app HTML once and it goes live. Nothing about the merchant journey changes; this page only exists until the first upload succeeds.

\n\n

\n App HTML file\n \n Admin token\n \n \n

\n\n

\n If you're deploying this for the first time\n

Set ADMIN_TOKEN in this val's environment.
Ship IDfy_ProfileIQ_MY.html here; the blob replaces on every upload.
Rotate the token before wider testing.

\n\n`;\n}\n\nfunction idfyHeaders(): Record | null {\n const id = conf(\"IDFY_ACCOUNT_ID\"), key = conf(\"IDFY_API_KEY\");\n if (!id || !key) return null;\n return { \"account-id\": id, \"api-key\": key, \"Content-Type\": \"application/json\" };\n}\n\nasync function extractMdFromZip(zip: Uint8Array): Promise {\n let i = zip.length - 22;\n while (i >= 0 && !(zip[i]===0x50 && zip[i+1]===0x4b && zip[i+2]===5 && zip[i+3]===6)) i--;\n if (i < 0) throw new Error(\"not a zip\");\n const cdOff = zip[i+16] | zip[i+17]<<8 | zip[i+18]<<16 | zip[i+19]<<24;\n const cdCnt = zip[i+10] | zip[i+11]<<8;\n let p = cdOff;\n for (let e = 0; e < cdCnt; e++) {\n const nLen = zip[p+28] | zip[p+29]<<8;\n const xLen = zip[p+30] | zip[p+31]<<8;\n const cLen = zip[p+32] | zip[p+33]<<8;\n const name = new TextDecoder().decode(zip.subarray(p+46, p+46+nLen));\n const locOff = zip[p+42] | zip[p+43]<<8 | zip[p+44]<<16 | zip[p+45]<<24;\n if (name.endsWith(\"full.md\")) {\n const lnLen = zip[locOff+26] | zip[locOff+27]<<8;\n const lxLen = zip[locOff+28] | zip[locOff+29]<<8;\n const cmpSz = zip[locOff+18] | zip[locOff+19]<<8 | zip[locOff+20]<<16 | zip[locOff+21]<<24;\n const method = zip[locOff+8] | zip[locOff+9]<<8;\n const dataStart = locOff + 30 + lnLen + lxLen;\n const raw = zip.subarray(dataStart, dataStart + cmpSz);\n if (method === 0) return new TextDecoder().decode(raw);\n const ds = new DecompressionStream(\"deflate-raw\");\n const w = ds.writable.getWriter();\n w.write(raw); w.close();\n return new Response(ds.readable).text();\n }\n p += 46 + nLen + xLen + cLen;\n }\n throw new Error(\"full.md not found in MinerU zip\");\n}\n\nexport default async function (req: Request): Promise {\n const url = new URL(req.url);\n\n /* -------- admin: upload app HTML into blob -------- */\n if (url.pathname === \"/admin/upload-app\" && req.method === \"POST\") {\n const token = url.searchParams.get(\"token\") || \"\";\n const admin = conf(\"ADMIN_TOKEN\");\n if (!admin) return new Response(\"ADMIN_TOKEN is not set on this val\", { status: 500 });\n if (token !== admin) return new Response(\"wrong token\", { status: 401 });\n const html = await req.text();\n if (html.length < 5000) return new Response(\"file looks too small\", { status: 400 });\n if (!/ 12000000) return Response.json({ error: \"file too large\" }, { status: 413 });\n const key = \"up_\" + crypto.randomUUID();\n await blob.set(key, buf);\n await blob.setJSON(key + \":meta\", { mime, name, at: Date.now() });\n return Response.json({ url: url.origin + \"/blob/\" + key, key });\n } catch (e) {\n return Response.json({ error: String((e as Error).message) }, { status: 500 });\n }\n }\n\n if (url.pathname.startsWith(\"/blob/\")) {\n const key = url.pathname.slice(\"/blob/\".length);\n if (!/^up_[a-f0-9-]{36}$/.test(key)) return new Response(\"Not found\", { status: 404 });\n try {\n const meta = (await blob.getJSON(key + \":meta\").catch(() => null)) as\n | { mime?: string; at?: number } | null;\n if (meta?.at && Date.now() - meta.at > UPLOAD_TTL_MS) {\n return new Response(\"Expired\", { status: 410 });\n }\n const r = await blob.get(key);\n return new Response(r.body, {\n headers: {\n \"content-type\": meta?.mime || \"application/octet-stream\",\n \"cache-control\": \"private, max-age=600\",\n },\n });\n } catch {\n return new Response(\"Not found\", { status: 404 });\n }\n }\n\n /* -------- IDfy proxy (AML POST hits api.idfy.com, everything else eve) -------- */\n if (url.pathname.startsWith(\"/idfy/\")) {\n const h = idfyHeaders();\n if (!h) return Response.json(\n { error: \"No IDfy credentials. Set IDFY_ACCOUNT_ID and IDFY_API_KEY on this val.\" },\n { status: 500 });\n const path = url.pathname.replace(/^\\/idfy/, \"\");\n const isAml = path.includes(\"/verify_with_source/aml\");\n const target = (isAml && req.method === \"POST\" ? IDFY_API : IDFY_EVE) + path + url.search;\n const upstream = await fetch(target, {\n method: req.method,\n headers: h,\n body: req.method === \"POST\" ? await req.text() : undefined,\n });\n return new Response(await upstream.text(), {\n status: upstream.status,\n headers: { \"content-type\": upstream.headers.get(\"content-type\") ?? \"application/json\" },\n });\n }\n\n /* -------- MinerU proxy (OCR for bank statements etc.) -------- */\n if (url.pathname === \"/mineru\" && req.method === \"POST\") {\n const token = conf(\"MINERU_API_TOKEN\");\n if (!token) return Response.json({ error: \"MinerU is not enabled on this val.\" }, { status: 501 });\n try {\n const { file, mime, name } = await req.json();\n const b64 = String(file || \"\").split(\",\")[1] || \"\";\n const bytes = Uint8Array.from(atob(b64), (c) => c.charCodeAt(0));\n if (!bytes.length) return Response.json({ error: \"empty file\" }, { status: 400 });\n const key = \"up_\" + crypto.randomUUID();\n await blob.set(key, bytes);\n await blob.setJSON(key + \":meta\", { mime: mime || \"application/pdf\", name: name || \"document.pdf\", at: Date.now() });\n const fileUrl = url.origin + \"/blob/\" + key;\n const MINERU = \"https://mineru.net/api/v4/extract/task\";\n const headers = { \"Content-Type\": \"application/json\", Authorization: \"Bearer \" + token };\n const submit = await fetch(MINERU, { method: \"POST\", headers,\n body: JSON.stringify({ url: fileUrl, is_ocr: true, enable_table: true, language: \"latin\" }) });\n const sj = await submit.json();\n if (sj.code !== 0 || !sj.data?.task_id)\n return Response.json({ error: \"MinerU submit failed: \" + (sj.msg || JSON.stringify(sj)) }, { status: 502 });\n const taskId = sj.data.task_id;\n for (let i = 0; i < 60; i++) {\n await new Promise(r => setTimeout(r, 3000));\n const pr = await fetch(MINERU + \"/\" + taskId, { headers });\n const pj = await pr.json();\n const st = pj.data?.state;\n if (st === \"done\") {\n const zipUrl = pj.data.full_zip_url;\n if (!zipUrl) return Response.json({ error: \"MinerU done but no zip URL\" }, { status: 502 });\n const zr = await fetch(zipUrl);\n const zBuf = new Uint8Array(await zr.arrayBuffer());\n const md = await extractMdFromZip(zBuf);\n return Response.json({ text: md, markdown: md });\n }\n if (st === \"failed\") return Response.json({ error: \"MinerU failed: \" + (pj.data?.err_msg || \"unknown\") }, { status: 502 });\n }\n return Response.json({ error: \"MinerU timed out after 3 minutes\" }, { status: 504 });\n } catch (e) {\n return Response.json({ error: String((e as Error).message) }, { status: 500 });\n }\n }\n\n /* -------- Grok proxy -------- */\n if (url.pathname === \"/grok\" && req.method === \"POST\") {\n const key = conf(\"XAI_API_KEY\");\n if (!key) return Response.json({ error: \"Grok is not enabled on this val.\" }, { status: 501 });\n const upstream = await fetch(\"https://api.x.ai/v1/chat/completions\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\", Authorization: \"Bearer \" + key },\n body: await req.text(),\n });\n return new Response(await upstream.text(), {\n status: upstream.status,\n headers: { \"content-type\": \"application/json\" },\n });\n }\n\n /* -------- serve the app -------- */\n const html = await getAppHTML();\n if (!html) {\n return new Response(setupPage(), {\n status: 503,\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n }\n const cfg = {\n proxy: \"/idfy\",\n uploadUrl: \"/upload\",\n minerUrl: \"/mineru\",\n grokUrl: \"/grok\",\n accountId: \"proxied\",\n apiKey: \"proxied\",\n };\n return new Response(html.replace(\"__CFG_JSON__\", JSON.stringify(cfg)), {\n headers: { \"content-type\": \"text/html; charset=utf-8\", \"cache-control\": \"no-store\" },\n });\n}","deleted",false,"label",[47,48,24],"MSME-lending-MY","Old_MSME","47e0794c-3deb-4401-a05d-7898c4a48ac1",["D",1788964891777],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","0990d888-332a-426c-83c7-284f37a85792","pinnedFileId","8c6e211a-ac5c-11f1-907a-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a0869d-70dd-7160-99eb-a19d5b289cea","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":-5},"org",{"_9":10,"_100":101,"_102":-5,"_59":-5,"_103":104,"_105":44},"branch",{"_37":90,"_11":91,"_22":30,"_92":49,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":12,"_99":10},"isOwned",215,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Uttiyam","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_83":-5,"_140":141,"_142":143,"_144":145,"_146":44,"_147":44,"_148":44,"_149":34,"_150":-5,"_151":-7,"_152":-7,"_153":67,"_154":44,"_155":44,"_156":-5,"_157":44,"_158":44,"_159":44,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":91,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]